Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce6c64e-b792-3a87-b3b2-d346888f3608.roa
File:                     9ce6c64e-b792-3a87-b3b2-d346888f3608.roa (raw, json)
Hash identifier:          ZxTt9pKIEll1FpU5JTMCDCYk80Z+jzE1supM7XoP4oo=
Subject key identifier:   12:DD:03:69:02:3D:0B:EB:C3:CF:10:13:F2:10:3F:3B:0B:E2:F2:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F83252160D97DF7D3E008AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce6c64e-b792-3a87-b3b2-d346888f3608.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:25:21:60:d9:7d:f7:d3:e0:08:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=e3321074-b69f-41bf-9b6f-4dc71ae0f1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:15:01:9b:04:e3:c5:ad:8e:00:5c:14:bb:
                    ad:25:0c:d0:e9:ea:a4:a7:23:e4:3b:07:5c:a6:12:
                    a2:18:98:85:e3:45:4c:aa:9a:ba:b0:5f:ab:42:0c:
                    cd:40:1e:ed:46:20:cd:c8:05:ee:b9:b5:95:02:65:
                    ca:1f:15:df:ca:de:04:1a:7e:3a:dd:0b:2c:b8:3b:
                    48:da:6c:11:fb:66:52:6d:9d:e3:6e:c9:10:9e:50:
                    f1:cb:df:f2:cb:a7:c1:46:29:60:41:74:86:d3:2d:
                    ef:ae:a0:38:ac:77:44:97:5a:49:bf:39:05:fa:39:
                    bf:5b:f6:97:be:cc:74:a9:1f:41:61:db:1f:f6:22:
                    6f:fb:29:ff:42:aa:be:a5:94:c3:12:98:21:a0:cb:
                    84:5c:b1:e7:7f:6f:88:be:13:b3:42:86:2f:fe:63:
                    82:48:3b:42:e3:5a:34:db:1f:29:22:30:47:ff:6e:
                    7e:06:84:85:19:dd:9d:96:d1:45:6b:6f:0f:63:2f:
                    c0:1c:e3:c2:4c:27:b8:05:05:5a:f4:a9:79:1e:ff:
                    47:de:77:42:4e:ae:fa:39:db:44:01:eb:cd:da:67:
                    fe:57:16:50:b2:8d:17:ed:98:07:0b:9b:91:f1:6f:
                    98:db:1f:7b:2f:7d:0b:23:3e:f7:eb:65:00:78:eb:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:03:69:02:3D:0B:EB:C3:CF:10:13:F2:10:3F:3B:0B:E2:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce6c64e-b792-3a87-b3b2-d346888f3608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:86:c4:38:81:35:49:ba:00:c4:5f:e7:9b:52:b8:20:b1:
         24:a5:ab:25:5a:dd:ba:5b:aa:45:eb:d7:51:a3:a7:7a:88:e1:
         3b:b6:74:7b:03:b4:6c:1e:26:4b:e1:79:2f:ac:1d:95:3c:0a:
         5f:30:03:66:54:7f:e9:ec:db:9e:75:1b:dd:3f:01:96:86:b8:
         12:60:ff:73:38:d4:36:c1:6c:07:0e:b9:14:da:00:47:ea:9e:
         73:86:72:ff:02:30:91:a1:56:2f:c8:8a:33:e5:29:da:7a:85:
         27:52:1e:02:ed:e9:cd:f9:98:7d:b3:e4:80:52:61:3a:19:99:
         96:b7:a8:04:6c:7b:0c:cc:de:ed:39:c0:88:18:de:61:b2:43:
         ed:f2:88:fc:39:53:2d:a2:f9:a4:cf:9d:ca:d4:d0:93:cf:a1:
         63:3b:b7:d7:eb:a4:1b:81:95:57:d8:07:fc:a8:16:a9:bd:81:
         0d:ad:64:81:16:6b:87:c0:47:d4:2d:a2:64:71:84:e5:79:62:
         ca:29:d8:18:c1:42:ee:31:3c:75:97:0c:14:f5:ee:71:d6:c6:
         e5:6a:a4:28:17:cf:e3:ab:6b:17:e4:41:11:a7:ae:42:0a:b6:
         1d:d9:f4:e7:16:3b:91:b2:dc:1e:4a:8d:2b:ed:ac:ac:3a:39:
         6f:58:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:22 2025 by rpki-client